hypothesis-generation

SUSPICIOUS: The core hypothesis-generation workflow is mostly coherent and low risk, but the skill mandates an unreviewed external skill/local script for figure generation with unclear provenance. Main risk is transitive trust plus broad external content ingestion, not confirmed malware or credential theft.